Vulnerability · Published Feb 7, 2022 · Assigned by apache

CVE-2022-22931Path traversal in Apache James 3.6.1

Medium 4.3

In plain English

A medium-severity path traversal in Apache James from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)4.3Medium

Exploit odds (30 days)1.8%top 21.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Maven	org.apache.james:james-server	3.6.2	GHSA-v84g-cf5j-xjqx

Affected products (as reported)

Vendor	Product	Versions
Apache Software Foundation	Apache James	Apache James 3.6.1

Weakness: CWE-22

References

https://lists.apache.org/thread/bp8yql4wws56jlh0vxoowj7foothsmpr x_refsource_MISC
https://www.openwall.com/lists/oss-security/2022/02/07/1 x_refsource_MISC